ropshell> use e074499a3b0996ab67e030a7ea57598c (download)
name         : ftp (arm/ELF)
base address : 0x10d7c
total gadgets: 65
ropshell> suggest
jmpcall
    > 0x00010deb : bx r3
    > 0x00010ded : bx lr
    > 0x00010e59 : blx r3
load mem
    > 0x00010dba : ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
    > 0x000121fb : ldrh fp, [lr, #0]!; adds r7, #8; mov sp, r7; pop {r7, pc}
    > 0x0001117f : ldr r3, [r7, #0x1c]; mov r0, r3; adds r7, #0x20; mov sp, r7; pop {r7, pc}
    > 0x00010db2 : ldr r2, [pc, #0x14]; add r3, pc, r3; ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
    > 0x00010dae : ldr r3, [pc, #0x14]; ldr r2, [pc, #0x14]; add r3, pc, r3; ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
pop pop ret
    > 0x00010e37 : pop {r4, pc}
    > 0x00011307 : pop {r4, r7, pc}
    > 0x000112a5 : pop {r4, r5, r7, pc}
    > 0x000118db : pop {r4, r5, r6, r7, pc}
stack pivoting
    > 0x000118d9 : mov sp, r7; pop {r4, r5, r6, r7, pc}
write mem
    > 0x000112ff : str r2, [r3, #4]; nop ; adds r7, #0xc; mov sp, r7; pop {r4, r7, pc}